[pmwiki-users] Action to list pages in group
Russell Bailey
russell-pmwiki at saberpunk.net
Thu Sep 22 15:34:46 CDT 2005
Jeremy Sproat wrote:
>I like this. That's pretty clever; I was going to have the javascript
>build the array, but having the server deliver a javascript array
>already formatted is pretty nifty.
>
>
>
Thanks.
>In order for this to happen, however, you'd have to see some horribly
>mangled page names start to show up first. One such (un-urlencoded)
>example is:
>
>"]); maliciousCodeHere(); var blah=new Array("
>
>...which would look pretty obvious in the Recent Changes page.
>
>
I don't even think that's a permitted page name.
More information about the pmwiki-users
mailing list